Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File:                     LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier:          xY47djl6VABhQTTld7csbsZepuZV4/4djwhx5x2+G08=
Subject key identifier:   2A:F7:C4:1F:52:08:C2:2C:4A:63:07:13:EF:D4:CF:65:63:19:AA:E4
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer:       /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial:       019E1E6C41EA4486FE3D371038B429513583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number:          135C
Signing time:             Tue 12 May 2026 23:01:11 +0000
Manifest this update:     Tue 12 May 2026 23:01:11 +0000
Manifest next update:     Wed 13 May 2026 23:01:11 +0000
Files and hashes:         1: LGbDBvE57-d51wae1jdeed1elzM.roa (hash: +JgCmgs+MPnrH+unBnQBmH3Z0J4auv7J23LfruzwOGI=)
                          2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: uIoA4ytpgujX46k4N9JwdTQyIEXfzbflyz+56fB6bPY=)
                          3: Mdk2rGO_DVEGin1GNTSly2AoZK4.roa (hash: iLFOQXgOcjprFdT2TgsrTO7NFGOS4V7YveXSXGEQwjc=)
                          4: MnysfPyo4atkz89bty1U8O9Gpxk.roa (hash: j0Rn3Q7Gpb1iUDxURvHQTFFvAHFS3dyzvh6jFQiBkzw=)
                          5: _R9ozOhjsnXdveB9O93LpJsoaN4.roa (hash: FgeHnK3aQkxgbjIxN0SaKLGGPBqXK9ZTQrdZ1bFtpBc=)
                          6: lfBfpuueFf8CZSpriLw9-1MWh0c.roa (hash: OX5r2aPlCVyVhqyEhlOJPVx5LfmFfhtFl33BQzrPhX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:41:ea:44:86:fe:3d:37:10:38:b4:29:51:35:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
        Validity
            Not Before: May 12 23:01:11 2026 GMT
            Not After : May 13 23:01:11 2026 GMT
        Subject: CN=2af7c41f5208c22c4a630713efd4cf656319aae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:3f:da:0a:e2:5f:e8:b4:33:89:12:af:33:
                    51:0f:fb:44:3d:4b:a5:18:fd:a0:24:2f:90:ec:b1:
                    21:d2:e6:fb:d4:a9:b5:37:02:45:65:8f:39:1a:29:
                    06:bd:9b:af:d9:f7:fe:7c:8d:d3:90:a5:69:89:ea:
                    56:21:7a:a7:ab:a3:ad:60:e0:f0:af:ad:0a:58:10:
                    b0:19:b6:87:f1:81:f0:41:18:ba:ea:a2:48:68:ee:
                    ca:62:35:a5:d5:d4:4e:74:b5:13:b4:d0:cb:0e:7b:
                    00:a4:27:0c:5d:ba:a2:f9:6d:be:a0:d4:0d:26:aa:
                    63:23:79:46:a1:c2:46:bf:30:2d:e2:77:f3:04:29:
                    b3:41:e3:d7:15:d9:45:2d:12:61:9f:ab:0b:19:ae:
                    cc:32:0b:ff:a2:dd:89:a8:d1:5a:e7:d7:f5:a8:ee:
                    cf:4e:31:bb:7c:80:9b:6e:ed:23:c4:6c:c1:d8:e8:
                    5f:75:28:7d:09:14:5e:42:39:8b:bc:07:4c:4b:00:
                    1c:e0:99:a2:4f:84:ab:be:82:92:da:78:ad:58:9e:
                    71:47:f1:ca:65:e7:ea:3f:fd:c3:3c:b6:7e:78:b5:
                    df:73:dd:7d:e1:be:19:fc:60:29:eb:72:b3:06:9f:
                    5b:e5:67:3d:6b:06:d6:90:eb:3f:30:fc:9b:71:53:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F7:C4:1F:52:08:C2:2C:4A:63:07:13:EF:D4:CF:65:63:19:AA:E4
            X509v3 Authority Key Identifier:
                keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:34:f4:a4:fc:9f:4a:3f:0f:22:51:47:7a:a1:24:bf:b2:8f:
         f9:d9:b7:07:44:a0:c1:11:bc:d3:1a:d7:91:ab:d3:66:ff:5f:
         9d:77:53:4e:d1:ed:79:4a:54:1d:78:fd:fb:1e:ad:de:e7:dd:
         78:2e:3e:3d:74:3b:be:1e:81:36:f3:19:87:6a:ae:f5:0f:b6:
         27:bb:01:23:8a:aa:4f:24:d2:08:b0:9a:4b:1a:de:5e:57:89:
         93:65:9c:a5:99:ff:fd:01:4b:d0:db:9a:f9:a2:b2:b9:5d:ea:
         66:97:05:0d:21:a9:3e:a4:6e:3c:79:0d:44:3b:5a:34:72:a8:
         a4:0f:ed:70:34:43:b7:3d:fd:41:c5:5c:55:8e:41:f6:17:f1:
         d1:f0:af:54:f5:14:36:07:1a:e9:7a:a8:8f:3e:bf:a3:c7:9a:
         73:0a:5c:2a:63:b8:d0:3d:0d:22:c6:c9:a4:6b:ef:9d:da:4c:
         38:28:a7:e5:bd:7a:59:04:91:b5:96:91:1f:31:c6:ad:46:b0:
         fb:64:1d:93:b7:dc:c3:c3:ce:b9:dd:f3:82:86:6d:c0:6f:86:
         3d:a6:74:01:21:54:3b:01:59:5d:2d:89:15:33:3e:13:d6:c1:
         3a:66:5d:7f:e4:64:06:86:b7:d4:0b:a7:37:34:64:36:0b:06:
         f8:5c:77:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebEHqRIb+PTcQOLQpUTWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzEzNmVkMTA5OTg1ODBhNTE3ZDk1OThhYmNhMzNkOWJh
NjY1OTkwHhcNMjYwNTEyMjMwMTExWhcNMjYwNTEzMjMwMTExWjAzMTEwLwYDVQQD
EygyYWY3YzQxZjUyMDhjMjJjNGE2MzA3MTNlZmQ0Y2Y2NTYzMTlhYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3E/2griX+i0M4kSrzNRD/tEPUul
GP2gJC+Q7LEh0ub71Km1NwJFZY85GikGvZuv2ff+fI3TkKVpiepWIXqnq6OtYODw
r60KWBCwGbaH8YHwQRi66qJIaO7KYjWl1dROdLUTtNDLDnsApCcMXbqi+W2+oNQN
JqpjI3lGocJGvzAt4nfzBCmzQePXFdlFLRJhn6sLGa7MMgv/ot2JqNFa59f1qO7P
TjG7fICbbu0jxGzB2OhfdSh9CRReQjmLvAdMSwAc4JmiT4SrvoKS2nitWJ5xR/HK
ZefqP/3DPLZ+eLXfc9194b4Z/GAp63KzBp9b5Wc9awbWkOs/MPybcVMnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr3xB9SCMIsSmMHE+/Uz2VjGarkMB8GA1UdIwQY
MBaAFC8xNu0QmYWApRfZWYq8oz2bpmWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYt
OTI5ZjEwNjYzMGYxLzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYtOTI5ZjEwNjYzMGYx
LzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDT0pPyf
Sj8PIlFHeqEkv7KP+dm3B0SgwRG80xrXkavTZv9fnXdTTtHteUpUHXj9+x6t3ufd
eC4+PXQ7vh6BNvMZh2qu9Q+2J7sBI4qqTyTSCLCaSxreXleJk2WcpZn//QFL0Nua
+aKyuV3qZpcFDSGpPqRuPHkNRDtaNHKopA/tcDRDtz39QcVcVY5B9hfx0fCvVPUU
Ngca6Xqojz6/o8eacwpcKmO40D0NIsbJpGvvndpMOCin5b16WQSRtZaRHzHGrUaw
+2Qdk7fcw8POud3zgoZtwG+GPaZ0ASFUOwFZXS2JFTM+E9bBOmZdf+RkBoa31Aun
NzRkNgsG+Fx3eQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:03:43 2026 by rpki-client